FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Description This article describes flow-based virus definitions not updating or getting connectivity failure.
Solution After running # diag autoupdate versions, below output on the CLI will appear :
Flow-based Virus Definitions --------- Version: 1.00000 Contract Expiry Date: Sun Mar 5 2023 Last Updated using manual update on Mon Apr 9 18:07:00 2018 Last Update Attempt: Wed Mar 25 08:25:36 2020 Result: Connectivity failure
Flow-Based virus definitions are only updated if an ant ivirus profile is actively assigned to a flow-based firewall policy.
Try to create a flow-based policy and add an anti virus security profile or you can add the Anti-Virus security profile to the existing flow-based policy on the firewall.
Once the security profile is added, run # execute update-av and wait for a few mins for the database to get updated.
The flow-based database provides 'in the wild' viruses as well as some commonly seen viruses on the network.
Flow-based virus scanning is an alternative to the file-based virus scanning, providing better performance but lower coverage rates than the file-based virus scan.
